Privacy Policy
How Mlath Alaml for Art Production processes data within the Mlath IOS platform.
Effective date: 16 July 2026 · Last updated: 16 July 2026
- Operator
- Mlath Alaml for Art Production
- Commercial Registration
- 105668-1
- Address
- Kingdom of Bahrain, Northern Governorate, Malkiya, Block 1034, Road 3431, Premises 958A
- info@mlath-alaml.com
- Phone
- +973 3396 1668 · +973 3228 8466
- Websites
- ios.mlathmedia.com · mlath-alaml.com
1. Who is responsible
Mlath IOS is a multi-channel business-communications platform for WhatsApp, Instagram and Messenger, operated by Mlath Alaml for Art Production (Commercial Registration 105668-1), located at: Kingdom of Bahrain, Northern Governorate, Malkiya, Block 1034, Road 3431, Premises 958A. The company is responsible for data processing within the platform and can be reached at info@mlath-alaml.com or +973 3396 1668.
2. Scope of this policy
This policy covers:
- The admin-panel user (the platform owner).
- People who contact the company through connected channels, including WhatsApp, Instagram and Messenger.
- Contacts added to the system.
- Recipients of legitimate, consented campaigns.
- Visitors of the public site and sign-in pages.
3. Data we may process
Based on what the system actually supports, the following may be processed:
- Contact names, phone numbers and classification tags.
- The profile name or username supplied by the channel in an inbound message payload.
- Inbound and outbound message texts, their identifiers and timestamps.
- Send, delivery, read and failure statuses.
- Conversation, template and campaign records.
- Marketing-consent records and opt-out request records.
- The owner’s sign-in and session data.
- IP addresses and technical/security request logs.
Media files (images, audio, video, documents) are not stored in the system at present; only texts and metadata are processed. If media storage is added in the future, this section will be updated before it is enabled.
The public site collects no visitor data and uses no analytics or tracking tools.
4. Purposes of processing
- Operating the messaging service and displaying conversations.
- Responding to customer requests and fulfilling orders and services.
- Sending legitimate transaction-related notifications.
- Sending marketing messages to consenting recipients only.
- Preventing fraud and abuse and protecting the account.
- Monitoring failures and service quality.
- Complying with legal obligations.
5. Consent and marketing messages
Marketing messages are not sent without appropriate consent, and recipients are informed of the business name and the type of messages to expect.
- Opting out can be requested at any time.
- The system automatically honors keywords such as “إلغاء”, “توقف”, STOP and Unsubscribe.
- Anyone who opts out is not re-entered into marketing without fresh consent.
6. Parties data may pass through
To the extent required to provide the service, data may pass through:
- Meta Platforms and the official WhatsApp, Instagram and Messenger APIs, for delivering and receiving messages and events.
- The website and database hosting provider.
- Security and backup providers where used.
- Authorized technical-support providers.
- Governmental or judicial authorities where a legal obligation exists.
7. Sale of data
Mlath Alaml for Art Production does not sell personal data, customer phone numbers or conversation content.
8. Retention
We retain data for as long as needed to provide the service and manage the customer relationship.
Some records may be kept longer for legal compliance, security, fraud prevention, or to evidence consents and opt-out requests.
Backups are deleted according to the hosting provider’s backup rotation cycle.
9. Data protection
Measures actually in place include:
- HTTPS transport encryption.
- Argon2id password hashing.
- Encrypted Access Token storage (AES-256-GCM).
- HMAC signature verification of every inbound webhook.
- Single-owner access restriction and security event logging.
- Rate limiting on sign-in.
- No secrets exposed in the interface or logs.
No technical measure guarantees absolute protection, but we apply and review these controls.
10. Your rights
A data subject may request:
- Access to their data.
- Correction.
- Deletion (see the “Data Deletion” page).
- Objection to marketing messages.
- Withdrawal of consent.
- A copy of the available data about them.
- To raise an inquiry or complaint.
Requests go to info@mlath-alaml.com and will be handled within a reasonable period.
11. Cookies
Session cookies (httpOnly) are used for authentication and security in the admin panel only. The public pages set no cookies; your language choice is stored locally in your browser without any tracking tool. We use no third-party analytics.
12. Children
The platform is a business-communications management service and is not directed at children; the company does not knowingly seek to collect children’s data.
13. Changes to this policy
Effective date: 16 July 2026 — Last updated: 16 July 2026. For material changes we will update this page and its “Last updated” date, and may notify active counterparties via the usual communication channels.
14. Contact
Email: info@mlath-alaml.com · Phone: +973 3396 1668 · Address: Kingdom of Bahrain, Northern Governorate, Malkiya, Block 1034, Road 3431, Premises 958A.